CWE-235 · 4 records

Improper Handling of Extra Parameters

CVEs in this class

4 records

CVE records
Action	CVE	Vulnerability	Severity	KEV	EPSS	Published
39Monitor	CVE-2017-20160No exploit	flitto express-param fetchParams.js parameter pollutionflitto · express-param · CWE-235 Pre-auth	Critical9.8	—	0.8%	Dec 31, 2022
36Monitor	CVE-2026-27851No exploit	When safe filter is used with variable expansion, all following pipelines on the same string are incorrectly interpreted as safe too, enablidovecot · dovecot · CWE-235 Pre-auth	Critical9.1	—	0.5%	May 12, 2026
28Monitor	CVE-2024-47651No exploit	Parameter Pollution Vulnerabilityshilpi · client dashboard · CWE-235	High7.1	—	0.4%	Oct 4, 2024
26Monitor	CVE-2026-20083No exploit	A vulnerability in the Secure Copy Protocol (SCP) server feature of Cisco IOS XE Software could allow an authenticated, local attacker with cisco · cisco ios xe software · CWE-235 Local privilege escalation Denial of service	Medium6.5	—	0.0%	Mar 25, 2026

CVE-2017-20160
39Monitor
flitto express-param fetchParams.js parameter pollution
CriticalCVSS 9.8No exploitEPSS 0%
- Pre-auth
flitto · express-paramDec 31, 2022
CVE-2026-27851
36Monitor
When safe filter is used with variable expansion, all following pipelines on the same string are incorrectly interpreted as safe too, enabli
CriticalCVSS 9.1No exploitEPSS 0%
- Pre-auth
dovecot · dovecotMay 12, 2026
CVE-2024-47651
28Monitor
Parameter Pollution Vulnerability
HighCVSS 7.1No exploitEPSS 0%
shilpi · client dashboardOct 4, 2024
CVE-2026-20083
26Monitor
A vulnerability in the Secure Copy Protocol (SCP) server feature of Cisco IOS XE Software could allow an authenticated, local attacker with
MediumCVSS 6.5No exploitEPSS 0%
- Local privilege escalation
- Denial of service
cisco · cisco ios xe softwareMar 25, 2026